Chief Information & Security Officer (CISO)

The Chief Information Security Officer (CISO) is an exciting, new role for the National Crime Agency. The CISO will provide strategic leadership for information and cyber security across the Agency, ensuring that its information, technology, operational capabilities and people are protected from the continually evolving threats faced by a law enforcement organisation of national importance and scale.

The CISO will report directly to the Director General Capabilities and will be responsible for circa 25 staff and a multi-year Cyber investment programme.

Key Responsibilities:

• Develop and lead the Agency’s information and cyber security strategy and risk appetite, aligned with government security policy, the Agency’s strategic objectives and the threat environment.
• Provide clear, independent and authoritative advice to the Director Generals, Executive Committee and Board on the Agency’s cyber security posture and principal risks.
• Ensure cyber security considerations are incorporated into strategic planning, investment decisions, organisational change and operational capability development.
• Ensure the Agency has the capability to prevent, detect, respond to and recover from cyber-attacks and other information security incidents.
• Lead the Agency’s approach to cyber incident management, ensuring effective escalation, coordination and executive decision-making during significant incidents.
• Maintain effective relationships with relevant national cyber security and law enforcement partners and ensure the Agency can respond rapidly to emerging threats.
• Provide assurance that critical operational systems and services have appropriate security controls, resilience and recovery arrangements.
• Build a strong security culture in which every employee understands their responsibility for protecting Agency information and systems.
• Develop and retain high-performing cyber security and information assurance professionals.
• Ensure cyber security risks associated with suppliers, partners, contractors and technology providers are appropriately assessed and managed.
• Develop strong relationships with relevant government security functions, the National Cyber Security Centre, law enforcement partners and other national security organisations.

Person specification:

• Proven experience developing and implementing cyber security strategies and policies within a complex, digital, data and technology reliant, fast paced, highly regulated organisation and operating environment.
• In-depth understanding of cybersecurity threats, technologies and risk management practices with the ability to make sound judgements on the trade-offs between operational capability and security.
• Experience leading an operational cyber security function, including researching, and implementing, proven industry standard Cyber/Information Security related frameworks.
• Exceptional communication skills, with the ability to present complex security concepts to both technical and non-technical stakeholders at all levels.
• Demonstrable commitment to lead, develop and nurture a highly performing, diverse and talented workforce.
• One or more professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or Certified Chief Information Security Officer (CCISO).

Benefits:

• Salary of £86,000 - £117,800 per year
• Civil Service Pension: a competitive contributory pension scheme that you can enter as soon as you join where we will make a significant contribution to the cost of your pension;
• Annual Leave: 25 days annual leave on entry (plus one privilege day for the King’s Birthday), plus 8 Bank Holidays, increasing to 30 days after reaching 5 years continuous service (plus one privilege day for the King’s Birthday), plus 8 Bank Holidays.
• Parental Leave: Family friendly policies including paid maternity, adoption, paternity and shared parental leave of up to 26 weeks.
• Flexible Working: Flexible working arrangements allowing you to split your work between the office and home, subject to the nature of the role.
• Learning and Development: Access to a range of learning and development activities, and opportunities to support career progression.
• Wellbeing and Inclusion: Occupational sick pay and access to occupational health services, a network of qualified Mental Health First Aiders and Workplace Support Officers, who can provide advice, signposting and support to all our officers.